Analysis
- max time kernel
150s - max time network
151s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
01/08/2026, 14:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-01_35be74d9e214e496d4e4550b3a6fa1aa_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_35be74d9e214e496d4e4550b3a6fa1aa_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 2026-08-01_35be74d9e214e496d4e4550b3a6fa1aa_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe
- Size 9.3MB
- Sample260801-refras1vat
- SHA256 57de9b93910487f323a1b4c7e14f37510da6b41ab6145ca28e451bc6740f079c
- MD5 35be74d9e214e496d4e4550b3a6fa1aa
- SHA1 c9dcf906b0d40655da88a2c887d54606687e6d67
- SHA512 795897bcb1481e7946b5c80b2a5081add50f5930d4361bf38f4cdbb59fa265758717b0ab2bf4865c6c1eb699cc61edeec149704bd8011de5f66dc8f5309dc8c8
- SSDEEP 98304:qmRUcfT1611PFZzY8zWDaDHiQ8QThojbCRKUgTH2M2m9UMpu1QfLczqssnKS5:mckPhR1XgTH2qBpu1QfLIqsuf5
- TLSH T16DA6F611A2D94E9CD06F9474CF5665A1AA237C454FA0ABDF09C0BE3D3F326A06E7421F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-01_35be74d9e214e496d4e4550b3a6fa1aa_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-01_35be74d9e214e496d4e4550b3a6fa1aa_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-01_35be74d9e214e496d4e4550b3a6fa1aa_akira_amadey_cobalt-strike_elex_hijackloader_icedid_luca.exe"1⤵
- System Location Discovery: System Language Discovery
PID:1260